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[Scope of Claims for Patent] 
[Claim 1] 

A method for encrypting a file in a memory device in an 
information communication system, comprising a plurality of 
terminals connected to each other by a communication 
network and a memory device accessible from said plurality 
of terminals and shared with a plurality of users, wherein 
said terminals are connectable by storage media with an 
operation function distributed to the users in advance, 
said storage media storing inherent storage medium 
identifying numbers and a master key list comprised of a 
plurality of secret numbers; referred to as master keys; 
writing a file from a terminal to said memory device 
comprises the steps of 

generating a key generating authority list which is a list 
of said storage medium identification numbers representing 
a sharer (sharers) of a file to be written and transmitting 
said key generation authority list from the terminal to the 
storage medium connected thereto, 
selecting a master key based on said received key 
generation authority list, generating a data key based on 
said selected master key and said received key generating 
authority list, and returning the same to said terminal, 
encrypting a plain text file using said data key to 
generate an encrypted text file in said terminal, and 
writing said encrypted text file, said key generating 
authority list and a file name into said memory device; and 
reading a file from said storage media by a terminal 
comprises the steps of 
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reading the encrypted text file and the key generating 
authority list from said memory device according to a 
specified file name, 

transmitting said read key generating authority list to the 
storage medium connected to said terminal, 
examining in each terminal whether said received key 
generating authority list contains its own storage medium 
identifying number, or if said storage media identifying 
number contained in said key generating authority list and 
self storage media identifying number have a predetermined 
relationship, 

selecting a master key based on said key generating 
authority list, generating a data key based on said 
selected master key and the received key generating 
authority list, and returning the same to the terminal when 
it is detected by said examination step, said received key 
generating authority list contains its own storage medium 
identifying number or said storage media identifying number 
contained in said key generating authority list and self 
storage media identifying number have a predetermined 
relationship by said examination, and 

decrypting said encrypted text file using said data key to 
'generate a plain text file in said terminal. 
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(54) ENCIPHERING METHOD BY HIERARCHIC KEY CONTROL AND INFORMATION 
COMMUNICATION SYSTEM 

(57)Abstract: 

PURPOSE: To improve the safety of a file that plural 
users shares in environment where users are 
hierarchically sectioned according to kinds of information 
which can be accessed and to correctly decode a 
ciphertext file, controlled by a user belonging to one 
layer, by a user belonging to a layer above the layer. 
CONSTITUTION: A terminal 100 reads a key generation 
right list 131 and a ciphertext 132, making a group with a 
file name 130 that the user inputs, out of a storage 
device 120 and sends only the key generation right list 
131 to an IC card 110. When the received key generation 
right fist 131 and the card identification number 133 of an 
IC card 110 satisfy specific relation, the IC card 110 
generates a data key 135 on the basis of a master key 
selected from among the key generation right list 131 and 
its card master key list 134 and sends the data key to 
the terminal 100. The terminal 100 decodes the 
ciphertext 132 with the received data key 135 to 
generate a plaintext 136. 
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